社内でアプリケーションの認証を実装しています。 Azure Active Directory(Azure AD)にセルフサービスパスワードリセット(SSPR)と多要素認証(MFA)を実装する予定です。 MFAとSSPRの両方に使用できる認証メカニズムを選択する必要があります。 どの2つの認証方法を使用する必要がありますか?それぞれの正解は完全なソリューションを示します。 注:それぞれの正しい選択は1ポイントの価値があります。
正解:A,B
Reference: https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-authentication-methods SMS-based sign-in is great for front-line workers. With SMS-based sign-in, users don't need to know a username and password to access applications and services. The user instead enters their registered mobile phone number, receives a text message with a verification code, and enters that in the sign-in interface. Users can also verify themselves using a mobile phone or office phone as secondary form of authentication used during Azure Multi-Factor Authentication or self-service password reset (SSPR). The Authenticator app provides an additional level of security to your Azure AD work or school account or your Microsoft account and is available for Android, iOS, and Windows Phone. With the Microsoft Authenticator app, users can authenticate in a passwordless way during sign-in, or as an additional verification option during self-service password reset (SSPR) or Azure Multi-Factor Authentication events. https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-authentication-methods